A central logging server ensures logs are collected in a tamper-proof manner and only ingested (not modified). This prevents attackers from altering logs locally.
Key concepts:
Logs should be centrally stored to prevent tampering.
Enabling log forwarding to a secure SIEM improves integrity.
Other options:
A (File monitoring tool) helps detect file changes but doesn’t prevent log tampering.
B (Changing log solutions) does not inherently improve security.
D (Log rotation and encryption) is best practice but does not prevent modification before transmission.
[Reference: CASP+ CAS-005 Official Study Guide –Security Operations and Logging, , , , , , ]
Submit